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IN THE CLAIMS 

Amended claims follow: 

L (Currently Amended) A method for generating a report on an unsolicited 
electronic message^ comprising: 

receiving an electronic mail message; 

determining whether the electronic message is an unsolicited message; 
if the n^essage is m unsolicited message, 

examining the message to identify a network address relating to the 
message, 

identifying an authority hosting the network address, and 
generating a report containing the identified network address and 
hosting authority; 

wherein identifying the hosting authority comprises identifving an owner of a 
network domain. 

2. (Original) The method of claim 1 further comprising transmitting the generated 
report to the identified hosting authority, 

3. (Original) The method of claim 1 wherein examining the message to identify a 
network address comprises identifying a URL. 

4. (Original) The mediod of claim 3 wherein identifymg a URL comprises 
comparing text within the electronic message to a database of words to identify the URL. 

5. (Original) The method of claim 3 further comprismg comparing the identified 
URL to a database of legitimate URLs. 

6. (Original) The method of claim 5 further comprising updating the database 
based on electronic messages received 
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7. (Original) The mcfthod of claim 3 wherein identifying the hosting authority 
comprises utilizing an Internet tool to locate a web server hosting the URL. 

8. (Original) The method of claim 7 wherein utilizing an Internet tool comprises 
utilizing WHOIS, 

9. (Cancelled) 

10. (Original) The method of claim 1 wherein identifying the hosting authority 
comprises identifying an Internet service provider, 

1 L (Original) The method of claim 1 further comprising transmitting the report to 
a central managed service provider configured to forward the report to the identified 
hosting authority. 

12. (Original) The method of claim 1 further comprisnig at least temporarily 
saving the report and transmitting the report to the identified hostmg authority at the end 
of a specified period. 

13. (Cunently Amended) A system for generating a report on an unsolicited 
electronic message, the system comprising; 

a detector operable to detect a network address withm an electronic message 
identified as an unsolicited message; 

a host identifier operable to identify an authority hosting the network address; 

a report generator operable to generate a report containing the identified network 
address and hosting authority; and 

a storage medium configured to at least temporarily store the identified network 
address and hosting authority; 

wherein identifying the hos ting authority comprises identifying an owner of a 
network domain. 
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14. (Original) The system of claim 13 further comprising a detector operable to 
detect unsolicited messages. 

15. (Original) The system of claim 13 wherein the network address is a URL, 

16. (Original) The system of claim 13 wherein the hosting authority is an Internet 
service provider. 

17. (Original) The system of claim 13 further comprising a processor operable to 
transmit the generated report, 

1 8 . (Original) The system of claim 1 7 wherein the processor is configured to 
transmit the report to the identified hosting authority. 

19. (Original) The system of claim 17 wherein the processor is configured to 
transmit the report to a central managed service pnjvider. 

20. (Original) The system of claim 13 fiirther comprising a database containing 
search tenns used to identify the network address within text of the electronic message. 

21 . (Original) The system of claim 13 fiirther comprising a database containing a 
list of trusted network addresses. 

22. (Currently Amended) A computer product for generating a report on an 
unsolicited electronic message, comprising: 

code that receives an electronic mail message; 

code that deteraiines whether the electronic message is an unsolicited message; 
code that examines the message to identify a network address relating to the 
message if the message is an unsolicited message, 

code that identifies an authority hosting the network address; 
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code that generates a report containing the identified network address; and 
a computer readable medium that stores said computer codes; 
wherein ide ntifying the hosting authority comprises identifvinp an owner of a 
network domain . 

23. (Original) The computer product of claim 22 wherein the computer readable 
medium is selected from the group consisting of CD-ROM, floppy disk, tape, flash 
memory, system memory, hard drive, and a data signal embodied in a carrier wave. 

24. (Original) The computer product of claim 22 further comprising code that 
transmits the generated report to die identified hosting authority. 

25. (Original) The computer product of claim 22 further comprising code that 
compares text within the electronic message to a database of words to locate the network 
address within the text 

26. (Original) The computer product of claim 22 further comprising code that 
compares the identified network address with trusted network addresses. 

27. (New) The method of claim 1 wherein identifying the hosting authority 
further comprises identifying an address, an adnmiistrative contact name, an 
administrative contact telephone number, and a name of at least one server associated 
with the hosting authority. 

28. (New) The method of claim 1 wherein identifying the hosting authority 
further comprises identifying an organization to which the network domain is legisteied. 

29. (New) The method of claim 28 wherein the report is utilized to generate an 
electronic mail message to be sent to tiie identified organization. 
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30. (New) The method of claim 4, wherein identifying the URL further comprises 
examining text surromiding the URL to detemiine a Ukelihood that the URL is an address 
of a web site associated with misolicited messages. 

3 L (New) The mediod of claim I vilierein the report includes disclaimer 
information and user definable text 
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